AccessEntryArgs

data class AccessEntryArgs(val clusterName: Output<String>? = null, val kubernetesGroups: Output<List<String>>? = null, val principalArn: Output<String>? = null, val tags: Output<Map<String, String>>? = null, val type: Output<String>? = null, val userName: Output<String>? = null) : ConvertibleToJava<AccessEntryArgs>

Access Entry Configurations for an EKS Cluster.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = new aws.eks.AccessEntry("example", {
clusterName: exampleAwsEksCluster.name,
principalArn: exampleAwsIamRole.arn,
kubernetesGroups: [
"group-1",
"group-2",
],
type: "STANDARD",
});
import pulumi
import pulumi_aws as aws
example = aws.eks.AccessEntry("example",
cluster_name=example_aws_eks_cluster["name"],
principal_arn=example_aws_iam_role["arn"],
kubernetes_groups=[
"group-1",
"group-2",
],
type="STANDARD")
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var example = new Aws.Eks.AccessEntry("example", new()
{
ClusterName = exampleAwsEksCluster.Name,
PrincipalArn = exampleAwsIamRole.Arn,
KubernetesGroups = new[]
{
"group-1",
"group-2",
},
Type = "STANDARD",
});
});
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/eks"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := eks.NewAccessEntry(ctx, "example", &eks.AccessEntryArgs{
ClusterName: pulumi.Any(exampleAwsEksCluster.Name),
PrincipalArn: pulumi.Any(exampleAwsIamRole.Arn),
KubernetesGroups: pulumi.StringArray{
pulumi.String("group-1"),
pulumi.String("group-2"),
},
Type: pulumi.String("STANDARD"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.eks.AccessEntry;
import com.pulumi.aws.eks.AccessEntryArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new AccessEntry("example", AccessEntryArgs.builder()
.clusterName(exampleAwsEksCluster.name())
.principalArn(exampleAwsIamRole.arn())
.kubernetesGroups(
"group-1",
"group-2")
.type("STANDARD")
.build());
}
}
resources:
example:
type: aws:eks:AccessEntry
properties:
clusterName: ${exampleAwsEksCluster.name}
principalArn: ${exampleAwsIamRole.arn}
kubernetesGroups:
- group-1
- group-2
type: STANDARD

Import

Using pulumi import, import EKS access entry using the cluster_name and principal_arn separated by a colon (:). For example:

$ pulumi import aws:eks/accessEntry:AccessEntry my_eks_access_entry my_cluster_name:my_principal_arn

Constructors

Link copied to clipboard
constructor(clusterName: Output<String>? = null, kubernetesGroups: Output<List<String>>? = null, principalArn: Output<String>? = null, tags: Output<Map<String, String>>? = null, type: Output<String>? = null, userName: Output<String>? = null)

Properties

Link copied to clipboard
val clusterName: Output<String>? = null

Name of the EKS Cluster.

Link copied to clipboard
val kubernetesGroups: Output<List<String>>? = null

List of string which can optionally specify the Kubernetes groups the user would belong to when creating an access entry.

Link copied to clipboard
val principalArn: Output<String>? = null

The IAM Principal ARN which requires Authentication access to the EKS cluster. The following arguments are optional:

Link copied to clipboard
val tags: Output<Map<String, String>>? = null

Key-value map of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

Link copied to clipboard
val type: Output<String>? = null

Defaults to STANDARD which provides the standard workflow. EC2_LINUX, EC2_WINDOWS, FARGATE_LINUX types disallow users to input a username or groups, and prevent associations.

Link copied to clipboard
val userName: Output<String>? = null

Defaults to principal ARN if user is principal else defaults to assume-role/session-name is role is used.

Functions

Link copied to clipboard
open override fun toJava(): AccessEntryArgs